COVID-19 vs the General Data Protection Regulation: Contact tracing apps and the protection of personal health and location data